$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1edfb03f-8503-4ce8-b9e1-09a45fb93789.roa File: 1edfb03f-8503-4ce8-b9e1-09a45fb93789.roa (raw, json) Hash identifier: l75kT+mQN9mghmyPXHXmsL/HNseJdIpt8Vj0nAukJHg= Subject key identifier: 65:09:DB:83:8C:51:75:0D:11:F7:11:66:87:6F:80:42:82:35:0E:81 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 73E440BDD7B8576D472805C172FE0F272C254943 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1edfb03f-8503-4ce8-b9e1-09a45fb93789.roa Signing time: Mon 23 Feb 2026 01:11:26 +0000 ROA not before: Mon 23 Feb 2026 01:11:26 +0000 ROA not after: Sun 24 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 52.124.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:e4:40:bd:d7:b8:57:6d:47:28:05:c1:72:fe:0f:27:2c:25:49:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Feb 23 01:11:26 2026 GMT Not After : May 24 23:59:59 2026 GMT Subject: serialNumber=12b09e9877be105c23c1ca7aa6b7fc9080379040a691bb886c1cf6f09108d66f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f9:b2:6c:74:a7:45:32:a6:93:49:ee:5f:4d: ea:a3:27:cc:b5:84:2c:fd:a4:07:73:54:f2:d7:78: 83:ff:e3:ec:34:9f:91:6d:d2:cf:be:b7:ea:47:66: b7:eb:7e:e5:ae:af:2d:bd:21:4d:40:57:b3:c2:c1: 96:c7:7d:65:32:61:76:6e:cf:50:c2:e5:08:2c:ae: fe:bb:74:f0:f9:1b:d1:ac:31:4d:ca:a8:50:ed:2c: fe:d2:c9:02:d4:a6:66:98:28:e5:38:0f:be:b4:71: 2b:55:49:d9:ff:67:15:d5:3b:b6:80:54:1d:3b:00: 79:ed:5f:83:1c:8d:d6:c5:5c:5d:55:25:e0:cc:af: 53:37:21:01:c5:74:06:47:56:1a:60:b4:0b:f4:8f: 55:6e:63:7c:cf:36:6c:a4:cb:1a:fa:5a:e4:fd:ed: 61:a8:15:f0:74:37:40:21:07:5a:eb:b2:5c:03:c8: 05:42:a2:b1:e9:6e:91:64:21:fd:78:cd:c0:c9:ba: c5:f4:7f:e5:62:44:d1:7a:ea:3d:a3:3a:9d:08:55: 67:27:87:22:91:43:bd:8d:9f:0b:67:66:b4:b7:78: ec:08:79:ef:01:c9:c9:41:50:d0:15:41:76:db:aa: a5:12:2a:ab:85:10:fd:d0:12:23:36:c7:68:0b:9d: 59:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:09:DB:83:8C:51:75:0D:11:F7:11:66:87:6F:80:42:82:35:0E:81 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1edfb03f-8503-4ce8-b9e1-09a45fb93789.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.124.140.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:6f:bb:b7:43:e1:8d:68:30:48:44:e9:2f:78:11:1e:29:a4: 93:8f:88:a7:88:58:c0:dd:95:9c:60:f0:80:8f:31:f7:8b:d4: 2e:a5:f2:af:33:39:3a:f5:9b:d6:02:4c:da:d6:50:22:3a:aa: 63:b2:65:01:dd:26:21:42:4f:b3:fe:cf:53:c1:47:b4:83:94: ae:4e:9d:90:3c:90:e4:65:f2:63:e6:92:77:7d:2a:5a:38:97: a6:8c:bb:96:ca:bb:19:ce:04:0d:b8:11:d7:05:ea:b9:db:57: d3:40:72:40:61:ae:eb:83:07:ec:d1:a6:7a:0b:43:a5:f8:ad: 34:d0:23:7f:76:df:6b:46:81:b5:11:c0:de:e4:a8:92:d6:39: 20:4f:f9:92:6f:c7:ba:2d:21:9b:b2:97:75:3e:08:ba:83:2f: cc:c6:89:03:ac:9d:60:33:1b:15:af:1c:d3:03:50:11:ec:eb: 59:52:4f:32:b8:4b:03:78:84:5b:88:6e:28:e6:8f:d7:c2:5f: de:c7:f4:a2:93:cd:33:c5:b6:50:76:f6:23:5b:9e:a4:2e:10: 51:c4:d4:52:e7:cc:ec:92:71:9f:43:a9:24:c2:51:9e:ac:10: 85:3b:a0:83:73:31:22:e4:e4:6a:8b:f3:02:a7:a1:8c:f2:27: 55:35:ac:b8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUc+RAvde4V21HKAXBcv4PJywlSUMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjIzMDExMTI2WhcNMjYwNTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMmIwOWU5ODc3YmUxMDVjMjNjMWNhN2FhNmI3ZmM5MDgw Mzc5MDQwYTY5MWJiODg2YzFjZjZmMDkxMDhkNjZmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCn+bJsdKdFMqaTSe5fTeqjJ8y1hCz9pAdzVPLXeIP/4+w0 n5Ft0s++t+pHZrfrfuWury29IU1AV7PCwZbHfWUyYXZuz1DC5Qgsrv67dPD5G9Gs MU3KqFDtLP7SyQLUpmaYKOU4D760cStVSdn/ZxXVO7aAVB07AHntX4McjdbFXF1V JeDMr1M3IQHFdAZHVhpgtAv0j1VuY3zPNmykyxr6WuT97WGoFfB0N0AhB1rrslwD yAVCorHpbpFkIf14zcDJusX0f+ViRNF66j2jOp0IVWcnhyKRQ72NnwtnZrS3eOwI ee8ByclBUNAVQXbbqqUSKquFEP3QEiM2x2gLnVldAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZQnbg4xRdQ0R9xFmh2+AQoI1DoEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFlZGZiMDNmLTg1MDMtNGNlOC1iOWUxLTA5YTQ1ZmI5Mzc4OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0fIwwDQYJKoZIhvcNAQELBQADggEBAE5vu7dD4Y1oMEhE6S94ER4ppJOP iKeIWMDdlZxg8ICPMfeL1C6l8q8zOTr1m9YCTNrWUCI6qmOyZQHdJiFCT7P+z1PB R7SDlK5OnZA8kORl8mPmknd9Klo4l6aMu5bKuxnOBA24EdcF6rnbV9NAckBhruuD B+zRpnoLQ6X4rTTQI39232tGgbURwN7kqJLWOSBP+ZJvx7otIZuyl3U+CLqDL8zG iQOsnWAzGxWvHNMDUBHs61lSTzK4SwN4hFuIbijmj9fCX97H9KKTzTPFtlB29iNb nqQuEFHE1FLnzOyScZ9DqSTCUZ6sEIU7oINzMSLk5GqL8wKnoYzyJ1U1rLg= -----END CERTIFICATE-----Generated at Sun Mar 1 21:49:04 2026 by rpki-client